Analysis
-
max time kernel
107s -
max time network
134s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
02/02/2024, 10:09
General
-
Target
893df9500bcc8b5e9f42b0a5176aff3c.xlsm
-
Size
41KB
-
MD5
893df9500bcc8b5e9f42b0a5176aff3c
-
SHA1
b0048e474b4a9e643825af4130537a4af6646923
-
SHA256
bf7c4bf955b4d20b0a1d61bd79399a0f93b220e7f4e41b1ea0914415c2edc470
-
SHA512
c3b5f585be5d875d7181e76c1beb8a140b713cd6cdd4e039a2b6cfa90882488e1536dff6e8802e2215adc121317d1c4582f4c62a1864ff14f241d4747978b2c2
-
SSDEEP
768:K6fbfxZ6rZN0DGCfkyX3eks4pSGn0Qic3q8AIHI5WpJm4:K6VuGzfPeUv027AIsWJX
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\893df9500bcc8b5e9f42b0a5176aff3c.xlsm"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB